Privacy
Standard Apache logs are kept, recording certain details of every HTTP[S] interaction. These logs are deleted after 28 days. Beyond that point only anonymous statistical data is kept for reporting purposes.
The UIS reserves the right to keep log files if an investigation is under way for the purposes of assisting with the investigation.
Details stored in the standard Apache log files:
- Internet address of connecting client
- Authenticated user id
- Time stamp
- Request made
- Server's response code and number of bytes returned
- The "user agent" string identifying the make of client
In addition, sites which have used Falcon's facilities to create forms will be recording the information passed to each form. You must refer to the site's local privacy policy to determine how this material is processed.
Cookies
- Users who visit a Falcon site may receive some or all of the Google Analytics cookies if the site administrator has enabled them (whether or not they authenticate).
- Sites may embed third-party material (e.g. YouTube videos) and these may carry their own cookies. You must refer to the site's local cookie policy to determine what cookies are being set and for what purpose.
- Sites make include 'ShareThis' social media buttons, which will carry cookies if the user has a 'ShareThis' account enabled.
- Users who authenticate will receive cookies from the Raven/Shibboleth authentication system.
| Cookie | Returned to | Function | P/S* |
|---|---|---|---|
| __utma | Falcon site | Google Analytics | P |
| __utmb | Falcon site | Google Analytics | P |
| __utmc | Falcon site | Google Analytics | S |
| __utmz | Falcon site | Google Analytics | P |
| _ga | Falcon site | Google Universal Analytics | P |
| _gat | Falcon site | Google Universal Analytics | P |
| _shibsession_... | shib.raven.cam.ac.uk | Authentication | S |
| Ucam-WLS-Session | shib.raven.cam.ac.uk | Authentication | S |
| JSESSIONID | shib.raven.cam.ac.uk | Authentication | S |
| _idp_session | shib.raven.cam.ac.uk | Authentication | S |
| _ZopeId | Falcon site | Session management | S |
| __unam __uset __stid |
Set by "ShareThis" widget if it is embedded on the site. The ShareThis service can identify a visitor if they have separately signed up with ShareThis for a ShareThis account (and provided their consent). This information may be used to display advertisements on sites that include the ShareThis sharing icon - See 'ShareThis' privacy statement. | Social Media buttons | P |
*Final column: S marks a session cookie. P marks a persistent cookie.
Session cookies expire when the user quits the browser (or earlier).
Persistent cookies remain within the browser after it is quit and restarted, until they reach their expiry date.
Raven privacy & cookie policy:
http://raven.cam.ac.uk/privacy.html
Google analytics cookie policy:
http://www.google.com/analytics/terms/us.html